Allow all /VAADIN/ requests, no authentication filtering needed.